IT Unit 11: Cybersecurity (A2 System vulnerabilities)

Potential source(s) of network vulnerabilities

• Network ports

• USB drives

• Poorly managed file permissions and privileges

• Failing to enforce a password policy

Port number used for HTTP?

• 80

• 443

• 418

• 27

Examples of organisational vulnerabilities

• Network ports

• USB drives

• Poorly managed file permissions and privileges

• Failing to enforce a password policy

Examples of software vulnerabilities

• Downloading software from untrustworthy sources

• SQL injection

• Zero-day vulnerabilities

• Failing to enforce a password policy

Continuing to use an older operating system, well after it is no longer being supported by the developer is an example of which type of vulnerability?

• Operating system vulnerability

• Software vulnerability

• Network vulnerability

• Organisational vulnerability

The largest vulnerability for mobile devices...

• The time it takes for the original equipment manufacturer (OEM) to update that system software

• Hackers accessing the mobile network signal.

• Failure to support CSMA with RTS/CTS

• Users' inability to secure their own deceives with passcodes.

Examples of physical vulnerabilities

• Downloading software from untrustworthy sources

• Theft of equipment

• Social engineering

• Failing to enforce a password policy

Examples of process vulnerabilities

• SQL injection

• Theft of equipment

• Data leaks

• Sharing security details

Reason why cloud computing can be vulnerable to attack...

• Its reliance on the Internet

• Users' not implementing sufficient security

• Hackers can access data as it flies up to the clouds

• Companies storing data in unsecure warehouses

A path or means by which a hacker (or cracker) can gain access to a computer or network server in order to deliver a payload or malicious outcome.

• Attack vector

• Defense infiltrator

• Weakness exploitation

• Incursion event